NGiNX cf only logs notice and above, not info.
Ignore .ssh/old/ and rs-ssl/